Exam 9: Firewalls

What should a company concerned about protecting its data warehouses and employee privacy might consider installing on the network perimeter to prevent direct connections between the internal network and the Internet?

MATCHING -hardware or software configured to block unauthorized access to a network

ACLs filter packets by using a __________ base to determine whether to allow a packet to pass.

A primary objective of a rule base is to ______________ communications based on complex rules.

Which two ports should packet-filtering rules address when establishing rules for Web access?

What service uses UDP port 53?

What is considered the 'cleanup rule' on a Cisco router?

MATCHING -software that forwards network packets and caches Web pages to speed up network performance

Which of the following is a general practice for a rule base?

What is a cleanup rule? Provide an example.

Which of the following is an advantage of hardware firewalls?

Generally,connections to instant-messaging ports are harmless and should be allowed.

Firewalls can protect against employees copying confidential data from within the network.

Which of the following is a typical drawback of a free firewall program?

Describe a firewall policy for application traffic.

MATCHING -a packet-filtering rule that comes last in a rule base and covers any packets that have not been covered by preceding rules

What makes an effective rule base? List three points to consider.

Software firewalls are usually more scalable than hardware firewalls.

Which of the following is a method for supporting IPv6 on IPv4 networks until IPv6 is universally adopted?

A firewall can consist of all devices positioned on the network _____________.